Comment on Insufficient validation of the max upload file size field